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1 . A method for a service provider on a private network to provide a service for an 

i 

external client on an external network via a gatewjay bridging the private and external 
networks, including the service provider carrying out the steps of: 

allocating a virtual name to the service provider; 

I ' ■ i 

making the virtual name available to aiclienti6n the external network; 
- binding the virtual name to the routing address of the gateway on the external 
network; and 1 : j 

binding the virtual name to the routing address of the service provider on the 
private network, ! 

I 

' ! 

2. A method as claimed in claim 1 mpvhich yirtjaal name is bound to the routing 
address of the gateway and the routing address of tile service provider by way of an 
external domain name server and private domain name! server, respectively. 
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3. A method as claimed in claim 1 in which the virtual name is bound to the 
routing address of the service provider on an internal naming service. 



I ! 



4. A method as claimed in any preceding claim in which the external network 



includes the internet. 
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5. A method as claimed in any preceding claim in which the client and the service 
provider communicate byway of tunnelled session vialthe gateway- 



6. A method as claimed in claim 5 in jwhich Messages communicated between the 
client and service provider are encrypted, i 



A method as claimed in claim 1 in which the client is on a second internal 
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network distinct from the internal network o|f the service provider and a second gateway 
bridges the second internal network and external jinetwork, the method including the 

steps of: ! I 

allocating a second virtual name to the|client; j 
making the second virtual name available to the service provider; 
- binding the second virtual name to the routmg address of the second gateway on 
the external network; and i j 

binding the second virtual name to the routing address of the client on the second 
internal network. ! 



■i 



8. A method as claimed in claim 1 in which fliere is a second service provider on a 
second private network able to communicate wilt an external network via a second 

gateway bridging the second private and external nestwork, including the steps of: 

i 

allocating a second virtual name to thej-secondj service provider; 
1 5 - making the second virtual name available to aj cli ent; 

- binding the second virtual name to the routing address of the second gateway on 
the external network; and j 

i 

- binding the second virtual name to jthe routing address of the second service 
provider on the second private netwc 



9. A method as claimed in claim 1 , in which the external network includes a further 
private network containing the private network of the service provider and there is 
further gateway bridging the further private network to the portion of the external 
network which is external to the further private] network, the method including the 

25 additional steps of: j ! 

- binding the virtual name to routing address ofjthe further gateway on the portion of 
the external network which is external to the f&rther private network. 

10. A method of providing access to a server oh a private network from an external 
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client on an external network via a gateway bridging the private and external networks, 
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the gateway supporting tunnelling of second messages to said server by encapsulating 
them in first messages routed to the gateway; the method involving: 

(a) - allocating a virtual name to the server and mapping it by a first mapping to the 

routing address of the gateway on thelextemal network and by a second mapping 
to the routing address of the server on the private network; 

(b) - at said external client using the virtual name jto address a said first message and a 

said second message, the foraier encapsulating the latter; 

(c) - using the first mapping to route the first message, with its encapsulated second 

! i 

message, to the gateway; and | j 

j ! 

(d) - using the second mapping to route ttie seconjd message extracted at the gateway 

from the fust message, to the server, j 

11. A method as claimed m claim 1 0 in which saicl first messages are encrypted 
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